$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: n7qOfqm7aNY32N04M8S5Loeke+1rMpPtDx0wI06LOtk= Subject key identifier: BE:CE:29:0C:9C:BC:D8:2C:E2:8E:AA:03:43:7E:78:E9:D1:F9:40:A1 Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0DAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0D9B Signing time: Fri 18 Jul 2025 18:06:43 +0000 Manifest this update: Fri 18 Jul 2025 18:06:42 +0000 Manifest next update: Fri 25 Jul 2025 18:06:42 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: J8y/TV8YzIIp8mXnDps9ZYHKm6mjKwvkoqy3WBt3aHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: Jul 18 18:06:42 2025 GMT Not After : Jul 25 18:06:42 2025 GMT Subject: CN=687a8d32-6540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:0f:40:86:21:e2:0d:b1:49:9b:c6:d8:3e: 8a:f2:c7:ae:d4:00:a9:4d:96:75:21:0b:d6:87:a3: 6e:db:2b:aa:cd:4a:d5:d5:eb:f8:c9:49:73:c9:92: ab:8f:f4:ce:36:21:4f:07:30:89:2e:38:64:5c:f7: 83:18:6f:e6:6a:6f:f4:d1:41:52:cc:18:f1:4e:17: 75:b7:0e:2e:3c:0e:ea:4d:06:dd:e3:68:12:62:e5: 09:8e:c6:be:a0:cc:a2:71:b8:5a:d1:ae:f0:3b:4d: 4b:08:8e:7d:e5:96:ee:b3:26:95:94:4f:df:52:5e: ec:89:66:e3:cb:6b:5b:7c:37:d7:76:d0:3c:d3:f3: 5a:64:6e:4c:fe:d1:a6:50:f0:20:89:be:a3:ef:83: e2:98:ab:25:81:4b:13:9c:a1:13:2b:53:f5:bd:f4: e7:84:c8:7b:8c:e7:e3:e9:19:83:85:22:a9:b2:2f: c8:59:e9:96:8c:d1:5c:4a:b9:cd:9d:6c:03:3b:38: 83:c7:28:d0:0c:bc:d6:95:7a:26:94:8a:1e:c8:90: 8f:36:04:d0:45:b3:b7:f6:68:e1:25:22:73:19:9f: 51:09:fe:f4:29:f6:5d:c2:a0:ba:da:a7:d4:0e:81: 6d:5c:f6:cc:d9:a9:42:49:95:c8:ae:f3:bd:af:a1: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CE:29:0C:9C:BC:D8:2C:E2:8E:AA:03:43:7E:78:E9:D1:F9:40:A1 X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:02:71:8b:03:81:45:96:75:2e:e5:75:b8:1f:73:84:b9:ab: e0:3c:56:96:d2:e6:90:d6:24:0e:52:85:e8:3a:95:b8:06:29: bf:b0:e1:78:87:90:0d:ed:25:53:4a:ff:09:66:20:3d:dc:3f: dc:b9:0e:65:5d:b4:50:aa:22:07:d7:eb:92:6c:d6:da:51:ca: 27:d3:7a:bc:1d:cb:ea:d7:33:4f:d2:55:54:f3:b7:c0:a2:3c: 96:47:57:5e:85:95:2d:10:51:63:cf:2e:43:9b:0b:1a:2d:11: 78:c1:46:83:3e:b2:5d:8f:8c:85:4b:70:a2:0f:2b:79:e7:74: 17:ef:4b:8d:60:94:f9:a2:10:49:bf:e9:78:4e:96:69:9c:7f: 3c:32:37:7d:50:d7:9b:30:a1:d5:a4:3b:bc:a9:37:ff:b8:fa: 14:e2:8c:f5:6e:82:e1:00:e7:1c:9e:25:49:eb:34:51:99:d6: be:0d:05:b7:d2:62:39:4c:6e:01:08:f9:14:3e:6b:3e:d0:08: 5c:51:98:77:66:28:47:ab:d5:ed:ce:dd:ba:66:7f:c4:b3:1e: eb:c2:f8:d3:14:90:46:c6:70:6d:c6:8d:23:a7:70:e8:70:8d: 17:31:e0:e0:a1:58:c3:ee:e7:32:81:d9:7c:cd:94:d6:58:ba: ab:d8:2c:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjUwNzE4MTgwNjQyWhcNMjUwNzI1MTgwNjQyWjAYMRYwFAYD VQQDEw02ODdhOGQzMi02NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNMPQIYh4g2xSZvG2D6K8seu1ACpTZZ1IQvWh6Nu2yuqzUrV1ev4yUlzyZKr j/TONiFPBzCJLjhkXPeDGG/mam/00UFSzBjxThd1tw4uPA7qTQbd42gSYuUJjsa+ oMyicbha0a7wO01LCI595ZbusyaVlE/fUl7siWbjy2tbfDfXdtA80/NaZG5M/tGm UPAgib6j74PimKslgUsTnKETK1P1vfTnhMh7jOfj6RmDhSKpsi/IWemWjNFcSrnN nWwDOziDxyjQDLzWlXomlIoeyJCPNgTQRbO39mjhJSJzGZ9RCf70KfZdwqC62qfU DoFtXPbM2alCSZXIrvO9r6FYgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7OKQyc vNgs4o6qA0N+eOnR+UChMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqAnGLA4FFlnUu5XW4H3OEuavgPFaW0uaQ1iQOUoXoOpW4Bim/sOF4 h5AN7SVTSv8JZiA93D/cuQ5lXbRQqiIH1+uSbNbaUcon03q8Hcvq1zNP0lVU87fA ojyWR1dehZUtEFFjzy5DmwsaLRF4wUaDPrJdj4yFS3CiDyt553QX70uNYJT5ohBJ v+l4TpZpnH88Mjd9UNebMKHVpDu8qTf/uPoU4oz1boLhAOccniVJ6zRRmda+DQW3 0mI5TG4BCPkUPms+0AhcUZh3ZihHq9Xtzt26Zn/Esx7rwvjTFJBGxnBtxo0jp3Do cI0XMeDgoVjD7ucygdl8zZTWWLqr2Cz2 -----END CERTIFICATE-----Generated at Sun Jul 20 02:48:46 2025 by rpki-client